Skip to content

Privacy Policy

Personal data processing and protection policy in accordance with GDPR.

Data Controller

The controller of your personal data is:
Villa GARUFA Wellness & Spa
Hlavná 46/92, Stará Lesná, 059 52 Vysoké Tatry, Slovakia
Email: rezervacie@vilagarufa.sk
Phone: +421 907 127 479

Personal Data We Collect

In connection with providing accommodation services, we process the following categories of personal data:

  • Identification data: name, surname, date of birth, ID document number
  • Contact data: email address, phone number, home address
  • Payment data: processed exclusively through a secure payment gateway
  • Operational data: check-in and check-out dates, number of guests, stay history

Purpose and Legal Basis of Processing

  • Contract performance (Art. 6(1)(b) GDPR): booking and provision of accommodation services
  • Legal obligation (Art. 6(1)(c) GDPR): guest registration records required by Slovak law, accounting obligations
  • Legitimate interest (Art. 6(1)(f) GDPR): property protection, security and guest communication
  • Consent (Art. 6(1)(a) GDPR): marketing communications – only on the basis of your voluntary consent

Data Retention Period

  • Booking data and accounting records: 10 years (legal obligation)
  • Guest registration records: 5 years from the end of stay
  • Marketing communications: until consent is withdrawn, max. 3 years

Recipients of Personal Data

We may share your personal data to the extent necessary with:

  • Booking.com B.V. – reservation intermediary (when booking via Booking.com)
  • Payment gateway provider – solely for payment processing purposes
  • Public authorities (police, tax authority) – only when required by law

Your Rights

As a data subject, you have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR)
  • Erasure – 'right to be forgotten' (Art. 17 GDPR), where processing is no longer necessary
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing based on legitimate interest (Art. 21 GDPR)
  • Withdraw consent at any time without affecting the lawfulness of prior processing

You may submit your request by email to rezervacie@vilagarufa.sk. We will respond within 30 days.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Slovak Data Protection Authority: Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, Slovakia, www.dataprotection.gov.sk.

This policy is effective from 1 January 2024 and may be updated periodically.